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10. ARITHMETIC PROCESSOR PAGING 


10.1 Introduction 


BBN is designing an interface between the KA-10 arithmetic 
processor and core memory which we call the Pager. This 

- @evice receives from the APR over a standard memory buss 
execute, read, write, and read-modify-write requests. It 

then maps the incoming virtual address into an appropriate 
real core address (provided the request is legal) and passes 
the request to the memory modules over another standard memory 
buss. The mapping requires about 150 nsec. 


The paging hardware performs the following functions: 


(1) Independently maps each 512-word block (or page) 
of the 262,144-word virtual address space into an 
absolute core location, or, if the block is not 

currently in core, traps to a core managing 
program. 


(2) Provides independent protection for each 512-word 
page in the read, write, and execute modes. 


(3) Records statistics in a Core Status Table which 
are useful to the core management program. 


The principal advantage of paging over the current dual- 
protect-and-relocate scheme incorporated in the KA-10 is 

that each process is provided with a large, constant 
262,144-word virtual machine, yet requires only those pages 
which are referenced during an interaction to be in core. 
This can significantly reduce the core memory requirements of 
running programs. 


10.2 Mapping 


It is presently impractical to keep mapping information for 
all 512 pages of a virtual address space in hardware because 
of the quantity of hardware required. For this reason, a 
limited number (16 originally, expandable to 32) of asso- 
ciative hardware registers are employed and the mapping 
information is kept in 512-word Page Tables in core memory. 
The manner in which virtual addresses are mapped into real 
addresses is shown in Figure 10-1. 


Whenever a page not mapped by the associative registers is 
referenced, the pager initiates a loading sequence (requiring 
about three memory cycles) during which the appropriate page 
table entry is referenced and an associative register loaded 
with the required mapping information. Associative registers 
are reloaded in a round-robin fashion. We hold the theory 
that a program's memory references will be sufficiently 
"collected" that 16 mapping registers are enough to prevent 
too frequent reloading. | 
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Figure 10-1 
Mapping From Virtual to Absolute Addresses 
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As shown in Figure 10-2, which page table is referenced 
during the loading sequence depends upon the memory. request. 
There is one page table for user mode requests and three 
possible partial page tables for monitor mode requests. The 
“locations of the monitor mode page tables are as follows: 


First APR's Map 3100, to 3177, 
Second APR's Map 3000, to 3077 Absolute locations 
Common Map 3200, to 3677 


Private Map 700. to ‘TTT. of the Process State Page 


The locations of the user mode page table and of the process 
state page are loaded into the pager when processes are 
switched, as described later. 


10.3 Switching Processes 


The IOB reset pulse generated by CONO APR,289898 causes the 
pager to clear itself. Thereafter, the pager may be 

Switched from one process to another by first storing an 
appropriate word in location 71, and then executing CONO 24, 
xxx. The pager does not interpfet any of the effective 
address bits of the CONO and will not respond to any other I/0 
instructions (except IOB reset). When CONO 24, xxx is 
received, the pager will complete the page number dump for the 
Old process (described later), clear itself, and reload its 
base registers from Tig. This is shown in Figure 10-3. 
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T777rT, 


User Mode | 


| Although processes 
may operate in 
environments as 
large as 256 K, 
the Upper Bound 
Register may be 
set to exclude 
all memory refere 
ences above 16, 
32, 48, 64, 80, 
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Space may achieve econom 
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Monitor Mode 


32 K Unmapped area 
Absolute addresses 
32 K Mapped individuall 
per Processor 
Mapped commonly | 
for all processes 
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160 K Exec and Monitor 
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Figure 10-2 
Mapping of Virtual Addresses 
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CONO 24, xxx causes the Pager to reload its main registers 
as follows: 


1. Read absolute location T1., interpreted as below. 
| xx | 3 | 11 bits |x/1/5 Bits| 11 Bits 


MBR (Monitor Base Register) 
Location of the Process 
State Page. 


DP (Dump Pointer) 

The Tocation (MBR)°640,+(DP) ° 

is where the next four-byte 
Associative Register dump will go. 


DB (Dump Bit) 
Enables the dumping feature 


UBR (User Mode Base Register) 
The location of the User Mode 
page table. 


UPR (UPper Bound Register) 000 
Limits legal virtual addresses 001 
to the first 16K, 32K, 48K, 64K; 010 


No restriction 
112K restriction 
96K restriction 


80K, 96K, or 112K. 011 80K restriction 
100 64K restriction 
101 48K restriction 
110 32K restriction 


111 16K. restriction 


2. Read location (MBR)*640,. 


A 
PUR (Process Use Register) 
AGER (AGE Register) | 


Figure 10-3 
Initializing the Pager For a New Process 
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10.4 The Self-Loading Sequence 


When a memory request is not mapped by an associative 
‘register, the pager enters its self-loading sequence. This 
consists of the following steps. 


(1) 
(2) 


(3) 


(4) 
(5) 


(6) 


Reading an appropriate page table entry 


Checking read, write, and execute pro- »Figure 10-4 
tection bits for access violation. 


Checking the directed trap bits for 
trap conditions. 


Tracking down shared and indirect 

pointers to determine the absolute Figure 10-5 
address of the page and trapping if 

the page is not in core. 


Modifying the Core Status Table entry 

corresponding to the core address of Figure 10-6 
the page and trapping if the page field 

is less than 20,. 


Dumping the last three and the current nine-bit 
virtual page numbers every fourth time a 
user-mode page is loaded into an associative 
register (only when the dumping feature is 
enabled). These four nine-bit bytes are stored 
in the Process State Page at location 640, + 
contents of the dump counter register. The 
dump counter is a 28-position counter that 
assumes values between 4 and 37,, so that the 
dump is actually into the region 644, to 6779. 

Kee gs 
Dumping’ a record of the last 112 user-mode 
pages loaded into the associative registers 
(not necessarily all different pages, however, 
because the mger may reload the same page 
several times). By means of this record the 
working set of a process may be swapped in 
quickly following rescheduling. 
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Address Control Field--Determines the format of the 22 bit 


address field 
' yRead 
Write 
Pohare Access Permitted to page 
*Hybrid or Display Processor 
| Directed traps and loading information 
a 


Address of this page--22 bits 


oe bit not currently assigned 
, Access trap bit 


Trap to Monitor-+4l10=trap immediately 
Ol=trap after loading A.R. 
Copy trap bit 11 and 00= don't trap- 
Trap to User bit 
ut in SPT (if indirect) or put on drum (if private) 


* Load adjacent pages when loading this one 


-_! Master File Number Page Number 
18 bits 9 bits 


This last pointer format should not be encountered 
by the paging hardware; it is used only on inactive 
files. The Monitor converts entries of this type 
to shared or indirect pointers when the file is 
activated. 


Figure *-.10-4 
Format of Page Table Entries 
I, Private pointers 
If. Shared pointers 
Iii. Indirect pointers 
IV. Indirect file pointers 


# These bits are ignored by the pager. 
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~ 
Core Status Table Entry _ 


0 8 47 18 1° 53 
9 Bits 9 Bits - 17 Bits | 
{ \ jw ModiFication 
0 8:9 17." 19 35 
AGER PUR | 


1. Bits 9-8 of AGER replace Bits #-8 of CST entry. 


2. Bits 9-17 and 19-35 are "ORed" into Bits 9-17 and 19-35 
of CST entry. 


3. Write request level is "ORed" into Bit 18 of the CST 
entry (if the write is permitted) 


? 


Figure 10-6 


Pager References to the Core Status Table 
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If no trap condition occurs during self-loading, an 
associative register is loaded with theYrequired mapping 
information and the pager proceeds. Note, however, that the 
write permission bit in an associative register is set only 
‘when both the modification bit in the Core Status Table and 
the write permit bit in the page table entry are set. 


10.5 Pager Traps 


A paging trap will occur whenever one of the following 
events happens: 


1. The trap bits.in the process page table force a 
trap. 


2. The addressed page (or indirecting page table) 
is not in core. 


3. An illegal condition is detected. 


4. The Core Status Table entry for an addressed 
page contains an age less than 20, (meaning that 
the core manager is controlling te page). 


When one of the above conditions happens, the pager first 
stores the cause and location of the trap into the Process . 
State Page at location 642,. The format of this word is 
shown in Figure 10-7. Theft if the APR operation in progress 
was a write, it stores the data into location 643, of the 
state page. Finally, it forces the APR to executé absolute 
location 70,. Locations: 70 should contain a JSYS instruc- 
tion toa tap routine. 


The arrangement of the Trap Cause field was chosen so that 
decoding of the cause could be easily accomplished by the 
JFFO instruction. 


To restart a process which was terminated by a pager trap, 
the following information is of value: 


1. The program counter (PC) saved by the JSYS in 
location 70. is correct. 


2. If the read or execute bits in 642, of the state page 
are set, restart is completed by performing a JRSTF “ 
to the first location of the trap routine. 


3. If the read bit is not set but the write bit is set 
in 642,, the data in 643, must. be written into the 
effective address of 642, before returning control 
to the process via JRSTF. 
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A sample program to restart a process which was terminated 
by a paging trap is given below: 


CONO 24,0 ;LOAD PAGER WITH NEW BASE REGISTERS 
;UPPER BOUND REGISTER, AND DUMP REGISTER 
MOVE 1,777642 ;GET TRAP STATUS WORD 
TLNE 1,12 ;SKIP IF NEITHER READ NOR EXECUTE BITS SE 
JRST BEGIN 
MOVE 777643 >GET DATA WORD 
TLNE 1,1 ;SKIP IF USER MODE 
JRST MONWR 
UMOVEM (1) »>COMPLETE USER MODE WRITE 
BEGIN: HRLZI 17, 777620 « 3RESTORE AC'S FOR THE PROCESS 
BLT 17, 17 
IRSTF @777641 ;RESUME PROCESS (JSYS IN LOCATION 70, 
;SAVES THE FLAGS AND PC IN 777641). 
MONWR: MOVEM (1) 3COMPLETE MONITOR MODE WRITE 
JRST BEGIN 


In Figure 10-7 the function of the PI cycle, Key cycle, d 
Indirect Address Sequence bits m be paging 
rap should not occur during a PI cycle, if the time-sharing 
software is coded properly since it is “tmpossible to recover 
from such a trap. The function of this bit is to notify the 
software that a disaster has occurred so that crash recovery 
may be attempted. Key Cycle traps will not occur very often 
under time-sharing, but we would like to be able to handle 
them since someone may wish to examine or deposit into th 
non-resident portion of the Monitor's address space.f The 
address seque stinguish data 
reads of non-existent memory from indirect addressing reads 
of non-existent memory. In the former case, the software may 
wish to create new memory and proceed, but in the latter case, 
a programming error has been made. 


10.6 Core Management Philosophy 


Core management for processes with large virtual address 
Spaces can prove to be a significant problem. To minimize 
difficulties we have designed into the Pager several features 
(Figure 10-6). 


(1) Recording modification 
ecause a write request will set the modified bit 
in the Core Status Table, core-to-drum swaps need 


be performed only for pages with this bit set. 
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TRAP STATUS WORD 


0 10 
[ane ARR 8 ae 


Effective ad 
trap 


MM (Monitor Mode) 
E (Execute request) 


Trap Cause 
(See Below) 


dress of paging 


W (Write request) 

IR (Read request) 

I (Indirect address sequence in progress) 
PI (Priority Interrupt cycle in progress) 
KEY (KEY cycle in progress--console Examine 
or Deposit switch pushed) 


Interpretation of the Trap Cause Field: 


WwW 
ge 
ja 


Copy Trap (Bit 9 set in Page Table entry 

User Trap (Bit 8 set in Page Table entry) 

Immediate Monitor Trap (Bits 9-10210 in Page Table entry) 
Illegal Read (Bit 2#0 in page table and read request) 
Illegal Write (Bit 3=#0 in page table and write request) 
Illegal Execute (Bit 4=0 in page table and execute request 
Access Bit not set (Bit 12=0 in page table entry) 

Upper Bound Register Exceeded 

Memory request not serviced:within 70 usec 


WO ON NU EU) fO 


& 3 Shared Not in core 
& 4 Page Tabl 
& 5 Excessive (Double indirecting is not permitted) 


& 10 Illegal 
Not in core 


1 Indirect & 2 Private \ 


Private 
shared 
On Replacement Queue (Bits #-6=% in Core Status entry) 
Drum Write Requested (Bits #-6=1 in Core Status entry) 
Not yet in core (but swap-in requested) 

(Bits g-6=2 in Core Status entry) 
Blocked by core manager (Bits $-6=3 in Core Status entry) 
Monitor after-loading trap (Bits 9-1f#=#1 in page table entry) 
Parity error 
Illegal pointer format (Bits §-1"11 in page table entry) 


Wo on NW Bw 


> 


Figure 10-7 


Trap Status Word Format 
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(2) 


(3) 


(4) 


(5) 
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Identifying Processes using a page | 
By Teadine the process use register (PUR) with a 
bit identified with the current process the Core 


Status Table entry for each page will contain a 
record of the processes which have used each page, 


the core management program can then discriminate 


pages in use by active processes from those which 
were used by processes now inactive. 


Marking time-of-last-reference 

When a large process is compute bound, its "working 
set" will frequently change with time. By 
periodically incrementing the age register, the 
core manager can look at the Core Status Table and 
distinguish recently referenced pages from ones 

not referenced for a long time. The latter are 
likely to be outside current working sets and are 
good candidates for replacement by new pages. 


Recording the working set of a process 

By examining the nine-bit page numbers dumped by 
the pager into tHe region 644, to 677,, the core. 
manager can make a good guess about the current 
working set of the process. If the process was 
rescheduled and swapped out of core, it may be 
reasonable to preload these pages into core before 
next scheduling the process. 


Provide for dual-processor operation 
Because one APR may be computing for a process, 


while the other APR is tampering with the Core 
Status Table, we have included a special check in 
the paging hardware for ages less than 20,. When 
the software is about to examine some entity in the 
Core Status Table, it may EXCH a word with the 
left-most five bits = @ for the Core Status Table 
entry. This will-prevent the other APR from 
inadvertently loading this page during the 
examination. ~ 
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10. ARITHMETIC PROCESSOR PAGING 


10.1 Introduction 


BBN has implemented a device called the BBN Pager which is 
connected between the KA1@ (PDP-1% arithmetic processor) 
and the KA1#'s memory port. In conjunction with a set of 
hardware modifications to the KA1#, the BBN Pager changes 
the core memory mapping mechanism such that core memory 

is allocated and protected in 512 word pages. The address 
space of the machine is mapped for EXEC mode as well as 
USER mode with the BBN Pager. The paging mechanism can be 
bypassed by executing a specific CONO to the pager or by 
executing (or depressing) IOB reset to invoke a so called 
"transparent mode" for the running cf the standard DEC 
monitors or diagnostic software. 


10.2 The Associative Mapping Process 


When mapping is enabled in the pager, the 9 high order 
virtual address bits, state of the EXEC/USER mode flip 
flop, and type of request (read, write, execute) from the 
KA1@ are compared and tested with the contents of 1 to 54 
(depends on pager configuration) associative registers. 
This comparison is performed on all associative registers 
Simultaneously. If a match is found, the particular as- 
sociative register containing the match also contains 

11 bits which become the high order 11 bits of the real 
core address (hereafter abbreviated as R.C.A.).** The use 
of 11 R.C.A. high order bits permits the KA1¢ 

to reference up to 1024K* words of memory. In this simple 
case, the overall delay directly attributed to the pager 
is about 100 nanoseconds plus cable delay. The simple case 
is represented by Figure 10-1. 


*K=1024 words | 


¥* £ glossary of terms is presented at the end of this section 
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From KA1@ Inside BBN Pager To Memory (When 
a match is found) 
Priority Inter- These three levels are 
rupt Cycle used when a trap con- 


| dition arises, but not 
Key Cycle (When > 
Examine or in the association 


Deposit Switch process itself. 
is pushed on 


computer 
console) 
Indirect Address, 
Fetch 
Read Level(R) ese ee Read Level (R+E) 
Write Level(W) | eee e 
permission bits in Write Level (W) 
Execute Level(E)3 each Associative 
Register 


EXEC/USER Mode . 
These levels are tested 


9 Highest Bits for equivalence with the li Highest Bits 
of 18 Bit corresponding bits in | of Absolute 
Address each Associative Register. Address 

9 Lowest Bits) 9 Lowest Bits 
of 18 Bit | | : of Absolute - 


Address Address 


Bits in Associative Registers 


Virtual Page i} oato4 Absolute Page Number 
Number--9 Bits ll Bits 


Execute Permission (EP) 
Write Permission (WP) 
Read Permission (RP) 
USER Mode (% for EXEC Mode) 


Figure 10-1 
Mapping From Virtual to Absolute Addresses 
(Simplest Case, Match Found in Associative Register) 
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10.3 USER Mode Mapping when the Association Fails 


When a match is not found in an associative register (hereafter 
abbreviated as A.R.), the pager begins a self-loading sequence 
which basically involves the loading of an A.R. from infor- 
mation found in one or more tables in core memory. The 
particular A.R. to get self-loaded is determined in a very 
Simple cyclic fashion. That is, if the last A.R. loaded was 
A.R. 5, the next to be loaded will be A.R. 6(if it exists; :; 
if not, the next existing A.R. in the cyclic sequence is used) 
sete The average pager is configured with 16 A.R.'s which 
means that if the program confines most of its references to 
an 8K or less working set, self~loading will be invoked 
infrequently. 


The first stage of the self-loading sequence involves reading 
some information from a table in core memory calied the page 
table (hereafter abbreviated as P.T.). This table is 512 
words long and is itself a page which may be anywhere in core 
memory. The origin of the P.T. is specified by the contents 
of a register in the pager called the User Mode Base Register 
(hereafter abbreviated as U.B.R.). The 11 bits of the U.B.R. 
are used as the 11 high order address bits and are concaten-— 
ated with the original 9 high order address bits (on which the 
association failed) to reference the appropriate word in the 
Poe 


The word which is read from the page table is of one of four 
types as determined by bits @ and 1 of the word. These types 
are: 

Q@ private page 

$1 shared page pointer 

19 indirect page pointer 

11 illegal format 


10.3.1 Private Page 


In the simplest case of a private page type, the rightmost 11 
bits contain the high order R.C.A. bits and bits 2-4 contain 
the read, write, execute access information which are used to 
self-load an associative register. The private page entry 
has many options which are detailed in Figure 10-e. 
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Entry type code $%, Private Page 


Write Access Permitted to Page 


2 | Access permission bit 


ee to Monitor--ll=trap immediately 
1g=trap after loading A.R. 
Gl=and #8 = don't trap 


Trap on write or read- 
modify-write reference 
(useful to make private 
copy of a page) 


i__..__-Trap to User bit 


tt ms meneeenenese seat 


*not used by Pager hardware 

Pigure 10-2, Private Page Entry in P.T. 
Most of the option bits cause traps to occur which cause 
the KA1@ to take some special action when a page is 
referenced in a particular way. 
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10.3.1.1 The Location Field 


The location field is 22 bits wide. This permits the speci- 
fication of where a page really is in primary, secondary, or 
even tertiary storage. If bits 14-17 are all @'s, the right 
most 11 bits contain the high order R.C.A. bits. If any of 
bits 14-17 are set, a page not-in-core trap will be invoked 
which will cause the KA1# to take special action. 


tO.3.1ee2. Limiting the Size of the User Address Space 


The pager contains a register called the Address Limit Reg- 
ister (A.L.R.) which is capable of restricting the legal 
USER mode virtual addresses to the first 16K, 32K, 48K, 

64K, 80K, 96K, 112K or the entire 256K. 


10.3.2 The Core Status Table 


Whenever an associative register is successfully loaded, a 
word in the core memory status table is updated. This table 
contains an entry for every page of real core in the system. 
An entry contains information about that page related to: 

the relative amount of time the page has been in core (con- 
tained in a 9 bit pager register called A.G.E.R.~-AGE Reg- 
ister), whether the page has been written into (the modification 
bit). and which processes (of a subset of all processes 
existing in the system) have referenced the page. The par- 
ticular processes referencing a page are identified by bits 
in the process use field of the entry. These bits are 
updated by the contents of a 26 bit pager register called 
P.U.R.--Process Use Register. 


The use of the core status table (C.S.T.) causes one additional 
read-modify-write cycle of overhead (while poe eee Ne the 
C.S.7,) an the: selt- loading sequence, 


The modification bit and write permission bits at the A.R. are 
handled in a slightly complicated way. The modification bit 
is set only if the memory request which initiated the loading 
of an A.R. was a write or read-modify-write cycle. The mod- 
ification bit is never cleared by the pager. If an A.R. is 
loaded due to a non-write request, the write permission bit 

of the A.R. is not set regardless of whether writes are per- 
mitted by the page table entry unless the page has already 
been modified (indicated by the modification bit already set 
from some previous operation) and write permission is specified 
by the page table entry. 
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A.R. write permit + PT write permit A (WRRQ V modification bit) 
new modification bit + old modification V (WRRQ A PT write permit ) 


As special aid for the control of shared pages, a pager trap 

is generated if the three high order bits of the page age field 
in the C.S.T. entry are all @'s. This provides a way for the 
core manager to defer use of a particular real core page while 
the page's state is being tested or changed. 


The core status table starts at absolute real core location 
499G,. A diagram of the table and its use by the pager is 
shown in Figure 10-3. 
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Absolute Core Location 
(Start of Table) 


4000, 


CORE STATUS 
TABLE 


Dispatched into by 
Real Core Page 


Number | a AVA AC 
_ 
Z 
, a 

Absolute Core 

Location ‘ 

10000 (highest NY 
address to which 

table can extend if 1024K real memory is used) eo 

i 
ze Core Status Table Entry ~ 
oe: 8 9 10 35 


9 Bits | 26 
page age process use bits 


modification sale 


AGER PUR 
Register Register 


1. Bits @ - 8 of AGER replace Bits @ - 8 of CST entry. 


2. Bits 19 — 35 are "“ORed"” into Bits 18 - 35 of CST 
entry. 


3. Write request level is "ORed" into Bit 9 of the 
CST entry (if the write is permitted). 


Figure 19-3 


Pager References to the Core Status Table 
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10.3.3 Shared Page Pointer 


The Shared Page Pointer entry in the P.T. is used for the 
most commonly shared pages in the system. This type of n° 


entry is detailed in Figure 10-4, raid 
Entry Code @1, Shared Page Pointer ye x 
Z 
er afm 
Read ) 
Write of o 
Execute BS ye 
Directed Traps and Loading Informatlé6n \ 
we 1 pe 45 : fe N13 14 26 27 35 


1{RIWIX Shared Page Unused # 
Number 13 bits 


Access permission bit 


Trap to Monitor- -ll=trap immediately 
19=trap after loading 
Aves 
Jil=and GF = don't trap 


Trap on write or read~ 

modify-write reference 

(useful to make private 
copy of a page) 


-Trap to User bit 


Figure 10-4 Shared Page Pointer 


The Shared Page Number/field is used as a dispatch into the 
Special Pages Table (S.P.T.) which starts at absolute core 
location 2¢ 398. The contents of the specified S.P.T. entry 
contains the page location information in bits 14-35 in the 
same format as a private P.T. entry bits 14-35. (see section 
U0 as en ore he ! 
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10.3.4 Indirect Page Pointer 


The Indirect Page Pointer entry in the P.T. is used for 
uncommonly shared files or processes or for indirectly 
referencing the dynamic address space of a file or process 
which is expected to change. This type of entry is de- 


tailed in Figure 10-5. 4 
eo 
a8 sr 
Entry Code 1%, Indirect Page Pointer - Ai uN 


Read 
Write 
| Execute 
Directed Traps and Loading Information 
9123456 13 14 26 27 35 


1)/@iR Page Table Number 


13 bits 


ae permission bit 


Trap to Monitor--ll=trap immediately 
1g=trap after loadin: 

AR. 
Gl=and GB = don't 

trac 


Page Number 
9 bits 


wesley 


Trap on write or read- 

‘modify-write reference 

(useful to make private 
copy of a page) 


Trap to User bit 


Figure 10-5 Indirect Page Pointer 
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The Page Table Number (P.T.N.) is used as a dispatch into 
S.P.T. to fetch an entry which contains the location in 
bits 14-35 (see section 10.3.1.1) of the indirect page 
table. The Page Number Field of the Indirect Page Pointer 
is used as a dispatch into the Indirect Page Table. The 
Specified entry of this table can be any of the three page 
table entry types just described. An attempt to use indi- 
rect page pointers to a depth of more than 2 will result 
in a pager trap. 


The access permission finally granted via Indirect Page 
Pointer mapping is the "AND" of the R,W,X bits and other 
access permissions starting with the first Indirect Page 
Pointer down through all P.T. entries until the destination 
page is found. This generally results in a reduction of 
the final access granted. 


LO 235 Summary of Py’. Entry Types 


All three page table entry types have the virtue that the 
actual location of a page is kept in only one place instead 
of being replicated in many page tables (for example). 
Detailed examoles of the three P.T. entries are presented 
in Figure 10-6. 
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10.4 EXEC Mode Mapping 


EXEC Mode mapping is really quite similar to USER Mode mapping. 
The major difference being that four distinct areas of the 

EXEC Mode address space are separately mapped and mapping of 
the "Resident Monitor" is separately enabled. These four areas 
are shown in Figure 10-7. . 


g 
Resident Monitor Code 
Mapping Optional 
(normally not invoked) 
32K Mapped Individually 
per KA1@ processor 
64K Swappable Monitor 
Code 
192K Mapped Privately 
per process 
256K : 


Figure 10-7 Exec Mode Address Space 


The associative mapping process is exactly the same for EXEC 
mode as USER mode. However, most of the page table (for the 
self—-lLoading sequence) for the EXEC mode address space is 
fixed in absolute addresses. Namely: 


Optional Resident Monitor Map 39BD 2 to 3877 2 
(Not used unless Resident 
Monitor Mapping is turned on) 
. absolute 
First KA1@'s Map 3199. to 3177, Real Core 
locations 


Second KA1@'s Map 379B_ to 3777 


Common Swappable Monitor Map 3299, to 3577 
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The area that is mapped privately per process is actually 
mapped by an area of the special overhead page associated 
with each process called the Process Storage Block (P.S.B.). 
The address of the P.S.B. is Specified by the contents of 

an ll bit pager register called the Monitor Base Register 
(M.B.R.). Only the highest 128 words of the P.S.B. are used 
for mapping purposes. The remainder is used for process 
Specific temporary storage, stacks, and 2 more words are 
used by the pager. Thus locations 600, - 777, of the P.S.B. 
map the highest 64K of the EXEC mode edavees pace, 
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10.5 Invoking the USER Address Space With the KA1®Y in EXEC Mode 


There are two classes of instruction modifications which were 
made to the KA1@ to enable the system to make references to 
parameters in the user's address space when the machine is in 
EXEC mode, ~ = ae By Ee 


10.5.1 UMOVEx 


The first class of instruction modifications is the UMOVEx 
set which forces MOVEs to and from USER space. 


UMOVE User Map Move 
a ee 
t 9 12-23 17 18 


20 


Move one word from the source to the destination specified by 
M, using the user address map. The source is unaffected, the 
original contents of the destination are lost. 


UMOVE | User Move 100 
UMOVET User Move Immediate Os 
UMOVEM User Move to Memory 102 
UMOVES User Move to Self 103 


These instructions provide a convenient way for the monitor 

to invoke the USER address mapping to fetch or store infor~ 
mation into the USER address space (UMOVE or UMOVEM). UMOVEIL 
provides a way for the monitor to do address computation 

using indirect addressing through the USER address space. 

Of course, indexing and AC references are not affected by the 
choice of USER map/EXEC map. However, addresses which indirect 
through the USER AC's are handled specially (see section 10.5.3). 


10.5.2 xXCT AC, E 

The next instruction change is a modification to the XCT 
instruction to use the AC Field (formerly ignored) to affect 
which map is used. 


The AC field is interpreted as shown in Figure 10-8. If the 
specified bit is on, use of USER address space is forced for 
any of the conditions indicated. 
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XR =H 
Xw~ \ 
XQ = 2 
Kio 2 XdO2) 


AC Field 


Effective Data Fetch, Address Data Store, 


Address | Byte Pointer Computation Byte 
Computation, Fetch, From Fetch/Store, 
Last Address Pos Stack, Byte Pointer Push Stack, 
of BLT Push Memory, Pop Memory, 
Sahat "From' of Wo! Of BEY 


BLT 


9 1g 11 2 


Bit 
Figure 19-8 XCT AC bits 


The instruction to be executed is always fetched from monitor 
Space. To BLT a data block from a user location specified in 
AC left, 

HRRI AC, FIRST 

xet 4, [BLT ac, Last] 

FIRST:. BLOCK N 

LAST = .-1 

To BLT a data block into a user region specified by the first 
and last user locations in AC left and right respectively, 

HRRM AC, INSTR 

HLR AC, AC 

HRLI AC, FIRST 

XCT ll, INSTR 
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INSTR: BLT AC, ¢ 
FIRST: BLOCK N 

XCT 15; INSTR can BLT data from one place to another in the 
user's address space. (Useful for zeroing out a region) 


To transfer a Stries of bytes specified by a user byes 
pointer in AC, 
LP: xcT 3, [ILDB ac2, ac| 
(or [EDPB ac2, ac] ) 
UMOVEx AC, E is equivalent to XCT 15, [moves AC. E | 


7 June 70 BBN PROPRIETARY i ¢ ee hy 


10.5.3 Call From Monitor Flag (PC Flag Bit 7) 


Bit 7 of the PC flags word is used to store the state of a 
flip flop named CALL FROM MONITOR. This bit is saved and 
restored in the same fashion as the other PC flag bits. It 
is cleared by MR START, and set whenever an EX JSYS (ef- 
fective address<1000) is executed in EXEC mode. This bit .- 
indicates to the called JSYS routine that effective addres- 
ses, byte pointers, and BLT pointers passed as arguments 
should refer to the EXEC mode address space, not the cur- ° 
rent USER address space. When this bit is on, special 

XCT and UMOVEX references are automatically forced into 

the EXEC mode address space instead of the USER's space. 


This feature simplifies the coding of EX JSYS routines 
which accept pointers as arguments and which may be called 
either from USER mode or EXEC mode. The routine merely 
makes use of any pointers with UMOVEx, or special XCT 
instructions, and the CALL FM MON flag automatically forces 
references into the correct address space. 
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10.5.4 Forced References to USER Space Locations G-17 2 


A 5 bit AC BASE REGISTER exists in the pager to provide an 

independent mapping mechanism for saved accumulators. This 
special mapping process to reference saved AC's is invoked 

by forced references to USER space (UMOVEX or special XCT) 

with addresses <20,. 


During the mapping process, the low 4 bits are taken from 

the virtual address, the next 5 bits (27-31) are supplied 

from the AC BASE REGISTER, the top 9 bits (18-26) are 

forced to 775, and EXEC mode addressing is forced. This 
intermediate virtual address is then passed to the pager 

for mapping in the standard fashion. This means that the 
saved accumulators are mapped into one of 32 blocks, (selected 
by the AC BASE REGISTER) each 16 werds long, located in 

page 775 of the EXEC mode virtual address space. (Recall 

this page is mapped privately per process). 


This space is ordinarily used as a stack of saved AC's. 
Upon entry to an EX JSYS which is pseudo-interruptable, 

the AC's are BLT'ed into this save region. The EX JSYS 
then references its own AC's in the normal fashion, and the 
AC's saved from the calling program via UMOVEX and XCT 
instructions with forced user space effective addresses 
<2%9,. Pointers passed from the calling program which orig- 
inavly pointed into the AC's are evaluated with UMOVE or 
special XCT instructions, and automatically reference 

these saved AC's. This feature operates in the same- 
fashion whether the calling program was USER mode or EXEC 
mode, i.e. the CALL FM MON flag forces special references 
>20,g into the EXEC mode space, but special references <209 
go into the saved AC stack independent of this flag. 


A side effect of this feature is that forced references 
<20, in USER mode reference the user's shadow core. (The 
rirgt 20,9 locations of the user's page zero). 
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19.6 Pager Traps 


A paging trap will occur whenever one of the following 
events happens: 


l. The trap bits in the process page table 
force a trap. 


2. The addressed page (or indirecting page 
table) is not in core, 


3. An illegal condition is detected. 


4, The Core Status Table entry for an ad- 
dressed page contains an age with the 
three highest bits = @. 


When one of the above conditions happens, the pager first 
stores the cause and location of the trap into the P.S.B. 

at location 57lp,. The format of this word is shown in 
Figure 19-9. tBen, if the APR operation in progress was 
awrite, it stores the data into location 572, of the P.S.B. 
Finally, it forces the APR to execute absoluté location 

18g (17%, if second APR). Location (Cr should contain a 
is¥s instruction to a trap routine. 


The arrangement of the Trap Cause field was chosen so that 
decoding of the cause could be easily accomplished by the 
JFFO instruction. 


To restart a process which was terminated by a pager trap, 
the following information is of value: 


1. The program counter (PC) saved by the JSYS 
at location 7B. is correct. 


2. If the read or execute bits in 57l, of the 
P.S.B. are set, restart is completed by 
performing a JRSTF @ through the PC word 
saved by the JSYS at location 78g (17%,). 


3. If the read bit is not set but the write 
bit is set in 57l, of the P.S.B., the data 
in 572, of the P.5.B. must be written into 
the Pet eae in 571, of the P.S.B. before 
returning control Bo the process via JRSTF. 
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A sample program to restart a process which was terminated 
by a paging trap is given below: 


CONO PGR, g ;LOAD PAGER WITH NEW BASE REGISTERS, 
ETC. (see section 10.7 for details) 
MOVE 1, 777571 ;GET TRAP STATUS WORD 
TLNE 1, 12 ;SKIP IF NEITHER READ NOR EXECUTE 
sBITS SET 
JRST BEGIN ches cK ‘n0% 
: Pa eye 29 
MOVE 777572 ;GET DATA WORD b> 
TINE 1, 1 ;SKIP IF USER MODE 
JRST MONWR 
UMOVEM (1) ;COMPLETE USER MODE WRITE 
BEGIN: HRLZI 17, 777520 ;RESTORE AC's FOR THE PROCESS 
BLT 17, 17 | 
JRSTF @777573 _ ;RESUME PROCESS (JSYS IN LOCATION 79g 
| :SAVES THE FLAGS AND PC IN 777573). 
MONWR: MOVEM (1) ;COMPLETE MONITOR MODE WRITE 
JRST BEGIN 


Figure 19~1 shows that the PI cycle, Key Cycle, and Indirect 
Address Fetch levels are provided to the pager. The reason 
for the PI cycle and KEY cycle bits is to distinguish traps 

of the running program from PI and KEY cycle traps (KEY cycles 
occur when the console EXAMINE, DEPOSIT, or XCT switches are 
pushed). The Trap Status Word in Figure 19-9 contains suf- 
ficient information to simulate a KEY cycle operation and 
recover from the trap provided timing is not critical (e.g. 
BLKO or BLKI to magtape or dectape might get data late in- 
dications). However, a pager trap during a PI cycle should 
never occur and is a disaster so recovery is impossible. The 
running program can be continued after such a trap by JRSTF 
@777573 as in the sample restart program. The indirect address 
sequence bit is used to distinguish data reads of non-existent 
memory from indirect addressing reads of non-existent memory. 
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In the former case, the software may wish to create a "new 
memory page" and proceed, but in the latter case, a prog- 
ramming error has been made. 


Another interesting feature of the pager is the monitor 
after-loading trap. All other directed traps take place 

at the beginning of the self-loading sequence, before any 
associative register has been loaded with mapping information 
for the new page, but the after-loading trap takes place at 
completion of the self-loading sequence. This enables the 
Monitor to perform statistics-taking operations for specified 
pages each time one is loaded into an associative register. 
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TRAP STATUS WORD 


8 9 1g 


Effective Address of Request 
EM (Exec Mode) 
E (Execute request ) 
W (Write request) 
R (Read request) 
I (Indirect address sequence in progress) 
PI (Priority Interrupt cycle in progress) 


KEY (KEY cycle in progress-~console Examine, 
XCT, or deposit switch pushed) 


Non-EX—~MEM 


Parity Error 
Figure 19-9 
BEus g~8, trap cause are decoded as follows: Bits @ and 1 


define one of four groups each defined below: 


Group 9: TSR GY, 1 = @¢ 


Bit Meaning if ON 
2 AGE = @@Xx 
3 AGE = @2X as read from 
r AGE = @4X — ©.8.T. 
5 AGE = G6X 
6 Monitor After-Loading A.R. trap 
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Group 1: TSR 9, 1 = #1 


ee) 
[ols 
ct 


Meaning if on 


Shared not in core 

page table not in core: (p.t.2) 

2nd indirect, private not in core (p.t.3) 
Indirect shared not in core (p.t.2 or p.t. 3) 
Indirect page table not in core (p.t.3) 
Excessive Indirect pointers (>2) 


Com CNUT PU) | 


Group 2: TSR VY, 1 = 1¢ 


Meaning if on 


Private Not in core 

Write copy trap (bit 9 in P.T.) 

User trap (bit 8 in P.T.) 

Access trap (P.T. bit 12 = @ or bits 19-11=3) 
Illegal Read or Execute 

Illegal Write 

Address Limit Register Violation or P.T. bits 
G,1=3 (illegal format) 


e9) 


Group 3: TSR @Y,1= 11 


Bit Meaning if on 

2 Private Not in core 

: 3 Write copy trap (bit 9 in P.T.) 

res ai pies 4 User trap (bit 8 in P.T.) 

PE oe 5 Access trap (P.T. bit 12 = @ or bits 19-11=3) 
6 Tllegal Read or Execute 
7 Illegal Write ; 
8 Address Limit Register Violation or P.T. bits 


J,1=3 (illegal format) 
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10.7 Controlling the Pager via I/O Buss CONO's 


The IOB reset pulse generated by the APR causes the pager 
to completely clear itself. In the cleared state no map- 
ping is performed by the pager and all memory requests 
are passed unchanged to the memory buss. The pager is 
assigned device mnemonic PGR (device number 24) and int- 
erprets the three low bits of CONO PGR, X as described 
below. Other bits of the CONO are ignored. 


CONO PGR, @ Clears all associative registers 
and reloads the Monitor and User 
mode base registers and Address 
Limit Register from location 71 
and the Core Status age and process 
use registers from location 72. 
(see Figure 10-10) 


CONO PGR, 1 Clears all associative registers 
mapping EXEC mode pages. 


CONO PGR, 2 Clears the associative register 
mapping the page addressed by the 
next write (or read-modify-write) 
memory reference. The Pager op- 
erates in the normal manner both 
before and after this write ref- 
erence but does not complete the 
write operation. 


Note that because a priority interrupt may occur between the 
execution of this CONO and the following write instruction, 
it is normally required to do the following: 


CONO PI, 4@@ ;TURN OFF PI SYSTEM 
CONO PGR, 2 ;CLEAR PAGE OF NEXT WRITE 
MOVEM PAGE*1@@99 ;CLEAR PAGE 
CONO PI, 2@¢ sTURN PI SYSTEM BACK ON 
CONO PGR, 3 Clears all associative registers 
mapping USER mode pages 
CONO PGR, 4 Turns off all mapping, leaving base 
registers and associative registers 
unchanged ek 


CONO PGR, 5 is equivalent to CONO PGR, 4 
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CONO PGR, 6 Turns off mapping for resident 
monitor (virtual addresses 
28-77777,) and turns on USER 
mode mapping and mapping of 
EXEC space ar - ear 


CONO PGR, 7 Turns on mapping for all address | 
| 28, - T7777T79 for both EXEC mode 
and USER modé references ; 
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CONO PGR, @ causes the Pager to reload its 
main registers as follows: 


1. Read absolute location 71g. (171, if second APR), 
interpreted as below. 


Z 3 4 6 7 ee 23 24 25 oa 
oa 


MBR Moston Base 
Register) Location 
of the Process Sto- 
rage Block. 


AC Base 
Register 


-UBR (User Mode Base Register) 
The location of the User Mode 
page table. 999 


ALR (Address Limit Register) | oo 
Limits Legal USER mode virtual 911 
addresses to the first 16K, 


No restriction 

112K restriction 
96K restriction 
89K restriction 


Huu th wb bou 


‘ 19¢ 64K restriction 

ney: 48K, OAK, BGK, 96K, or 191 = 48K restriction 
zi 11¢ 32K restriction 

11% 16K restriction 


2. Read location 72. (172, if second APR) 


g 8 9 1g | 35 


AGER (AGE Register) 


Figure 19-9 


Initializing the Pager For Running a New Process 
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Glossary 
AG. e Ry AGE Register 
A.L.R. Address Limit Register 
AePiR, Arithmetic PRocessor (KA1Q) 
eR. Associative Register 
CcS.t. — ss Core Status Table | 
MBs Rs | 7 Monitor Bade Register 
PGR PaGeR device mnemonic 
Pao ees | Process Storage Block 
Bie ly Page Table 
Pell Page Table Number 
Paver: se | Process Use Register 
R.C.A. Real Core Address 
SaP se | Shared Page Number 
“SeP els Special Pages Table ; 


UBers . User Mode Base Register 


